$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft File: lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft (raw, json) Hash identifier: fnFyTe+0fUp6qA34ThT+Hg8Hh6O28MFZd8K9xpyQNdE= Subject key identifier: 08:05:3B:00:A4:8A:FF:D1:9F:F8:26:6F:D5:FD:C8:82:BE:EC:50:FB Authority key identifier: 95:35:D7:61:10:B3:C0:29:C5:85:5B:4C:17:45:05:AF:61:19:F3:0C Certificate issuer: /CN=A91D0C8E/serialNumber=9535D76110B3C029C5855B4C174505AF6119F30C Certificate serial: 043B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft Manifest number: 041B Signing time: Thu 12 Jun 2025 23:59:45 +0000 Manifest this update: Thu 12 Jun 2025 23:59:45 +0000 Manifest next update: Thu 19 Jun 2025 23:59:45 +0000 Files and hashes: 1: lTXXYRCzwCnFhVtMF0UFr2EZ8ww.crl (hash: CEESnSl+rzMu5jkhtm/gKcGtdmOziKqZUIXmo/NUvrM=) 2: A8827568116911EEBB241C32C4F9AE02.roa (hash: ePscgiftvgu3AgZJRcwiRUYhc5l5akEknNm+3bxCM0A=) 3: E248BDA63C5211EF94184A20C4F9AE02.roa (hash: uCKPAwy0X3Z4CL+hlBr0CZ+w6vMoqyCthCGEPEwyTxY=) 4: A6FA9A4A116911EEBB241C32C4F9AE02.roa (hash: RgkBiig85GBTWo6hrTV95O/BhHQIjrp9qKOVuIGC96Q=) 5: F4D295243FDA11EFAF5E676AC4F9AE02.roa (hash: 1RhS2h2tWn1m1rNY8jrx9gtNAHNEkDyNHgYU79X2jK0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.crl rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 23:59:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1083 (0x43b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0C8E, serialNumber=9535D76110B3C029C5855B4C174505AF6119F30C Validity Not Before: Jun 12 23:59:45 2025 GMT Not After : Jun 19 23:59:45 2025 GMT Subject: CN=684b69f1-c1ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:3f:6e:5d:a2:6f:d8:d4:ea:81:9a:84:20:e1: 28:d5:23:00:1b:dd:1b:3f:72:b5:37:b5:bc:70:8c: af:79:eb:e9:d0:39:e6:1d:21:8c:c2:09:88:d5:4b: 07:67:ce:a9:b5:d3:7b:8a:1a:01:92:b7:cb:25:d5: 73:76:c7:7b:f9:55:f3:88:75:c2:85:b7:0f:59:b4: 79:75:60:fc:4a:3c:92:8e:86:3a:c6:7a:e8:cb:0c: 8d:e3:67:67:e7:33:2f:82:70:0a:0c:e1:c3:d8:bb: 76:bc:60:8e:b4:39:a0:24:c1:d3:17:b8:82:17:56: 26:a3:c2:b7:61:94:8c:bf:51:09:dd:99:3d:db:03: 3a:b6:92:13:9e:6c:44:dc:27:96:4e:8c:ac:4f:4a: 66:a1:41:7e:db:7d:83:cd:8b:ba:8c:fb:17:ba:93: e6:4c:95:3a:73:e1:de:4b:e8:a0:4a:ad:e0:f5:91: d6:86:b6:d3:97:0e:1e:1d:40:4a:94:12:86:50:30: 27:4f:ed:ae:6a:b0:01:a7:a5:1e:42:5f:6e:b3:29: f3:70:94:9b:84:3d:53:a5:ac:c5:4a:7d:24:ec:81: 8d:af:15:be:92:74:92:a5:b2:4f:79:95:c4:36:9c: ec:76:bc:42:49:a9:79:c0:59:50:3e:06:a7:10:51: 8d:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:05:3B:00:A4:8A:FF:D1:9F:F8:26:6F:D5:FD:C8:82:BE:EC:50:FB X509v3 Authority Key Identifier: keyid:95:35:D7:61:10:B3:C0:29:C5:85:5B:4C:17:45:05:AF:61:19:F3:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:87:e8:56:67:98:dd:a8:7b:72:af:fb:a1:49:36:38:e9:e3: b4:45:da:24:67:f2:f0:1b:85:9c:93:17:a6:6c:70:74:56:39: f3:aa:b3:71:38:3e:1b:6b:79:a2:c1:8e:e2:98:f2:b7:08:6b: 33:a5:6c:e4:af:c6:8b:b3:4e:ec:4d:88:0a:78:7f:eb:9e:98: 95:6a:bc:ff:d3:01:56:04:8a:d2:70:6f:2e:cd:9d:d3:5c:91: 6c:72:35:5a:16:ab:64:69:23:ef:cd:65:b0:6c:2c:dd:6d:a3: 9f:9c:8d:21:be:17:02:5d:65:1a:1f:2f:8e:d9:08:ce:46:2b: df:20:90:92:c9:3b:4e:21:97:58:93:54:8f:78:6d:a9:87:75: 15:db:8e:43:55:54:f3:9e:4c:f2:2d:59:8a:2f:c3:49:55:e3: 4c:31:4c:f7:0c:ee:b5:42:24:55:92:e8:0a:d6:96:00:57:3c: 2e:4c:2f:12:ae:1b:96:63:03:1e:25:38:9f:1b:89:59:1b:a1: 62:1b:ce:39:4d:2c:23:8f:f4:2c:27:df:8b:92:2b:81:6e:94: 38:92:8f:b6:b5:ab:18:13:34:0a:8c:f2:13:e7:23:03:1f:a2: 83:e5:31:f3:2b:d1:41:c4:af:3d:d0:0e:c4:8d:56:72:9d:53: 48:54:fe:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDBDOEUxMTAvBgNVBAUTKDk1MzVENzYxMTBCM0MwMjlDNTg1NUI0QzE3NDUwNUFG NjExOUYzMEMwHhcNMjUwNjEyMjM1OTQ1WhcNMjUwNjE5MjM1OTQ1WjAYMRYwFAYD VQQDEw02ODRiNjlmMS1jMWFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyj9uXaJv2NTqgZqEIOEo1SMAG90bP3K1N7W8cIyveevp0DnmHSGMwgmI1UsH Z86ptdN7ihoBkrfLJdVzdsd7+VXziHXChbcPWbR5dWD8SjySjoY6xnroywyN42dn 5zMvgnAKDOHD2Lt2vGCOtDmgJMHTF7iCF1Ymo8K3YZSMv1EJ3Zk92wM6tpITnmxE 3CeWToysT0pmoUF+232DzYu6jPsXupPmTJU6c+HeS+igSq3g9ZHWhrbTlw4eHUBK lBKGUDAnT+2uarABp6UeQl9usynzcJSbhD1TpazFSn0k7IGNrxW+knSSpbJPeZXE NpzsdrxCSal5wFlQPganEFGNkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAgFOwCk iv/Rn/gmb9X9yIK+7FD7MB8GA1UdIwQYMBaAFJU112EQs8ApxYVbTBdFBa9hGfMM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMEM4RS8wMzJFNTdCODc0 MzkxMUVDQjU1NzIzNkZDNEY5QUUwMi9sVFhYWVJDendDbkZoVnRNRjBVRnIyRVo4 d3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xUWFhZUkN6d0NuRmhWdE1GMFVGcjJFWjh3dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MEM4RS8wMzJFNTdCODc0MzkxMUVDQjU1NzIzNkZDNEY5QUUwMi9sVFhYWVJDendD bkZoVnRNRjBVRnIyRVo4d3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJh+hWZ5jdqHtyr/uhSTY46eO0RdokZ/LwG4WckxembHB0VjnzqrNx OD4ba3miwY7imPK3CGszpWzkr8aLs07sTYgKeH/rnpiVarz/0wFWBIrScG8uzZ3T XJFscjVaFqtkaSPvzWWwbCzdbaOfnI0hvhcCXWUaHy+O2QjORivfIJCSyTtOIZdY k1SPeG2ph3UV245DVVTznkzyLVmKL8NJVeNMMUz3DO61QiRVkugK1pYAVzwuTC8S rhuWYwMeJTifG4lZG6FiG845TSwjj/QsJ9+LkiuBbpQ4ko+2tasYEzQKjPIT5yMD H6KD5THzK9FBxK890A7EjVZynVNIVP4c -----END CERTIFICATE-----Generated at Sat Jun 14 19:26:24 2025 by rpki-client